Unauthorized Data Modification in Block Editor Gallery Slider for WordPress

CVE-2025-6726

What is CVE-2025-6726?

The Block Editor Gallery Slider plugin for WordPress suffers from a significant vulnerability, allowing unauthorized data modification due to a lack of proper capability validation in the classic_gallery_slider_options() function. This issue affects all versions up to and including 1.1.1, making it possible for authenticated users with Subscriber-level access and higher to modify post metadata for any post, potentially compromising site integrity and user data.

References